CSX Identify and Assess Cybersecurity Threats 3

Question 1

Which open-source framework provides a structured knowledge base of adversary tactics and techniques based on real-world observations?

Accepted Answer

MITRE ATT&CK

Answer

MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques derived from real-world attack observations, used for threat modeling and detection.

Question 2

A zero-day vulnerability is particularly dangerous primarily because:

Accepted Answer

No patch or mitigation exists at the time of its exploitation

Answer

Zero-day vulnerabilities are dangerous because they are unknown to the vendor, meaning no patch exists and defenders have no advance warning to prepare.

Question 3

When performing a threat assessment, an analyst categorizes threats by their potential impact and likelihood. This process is best described as:

Accepted Answer

Risk prioritization

Answer

Risk prioritization involves ranking threats based on the combination of their likelihood of occurrence and the potential impact they would have if realized.

Question 4

Which threat actor type is typically motivated by financial gain and tends to use ransomware or banking trojans?

Accepted Answer

Cybercriminal

Answer

Cybercriminals are primarily motivated by financial gain and commonly deploy ransomware, banking malware, and fraud schemes to generate profit.

Question 5

What does IoC stand for in cybersecurity threat identification?

Accepted Answer

Indicator of Compromise

Answer

Indicators of Compromise (IoCs) are forensic artifacts such as malicious IPs, file hashes, or registry keys that suggest a system has been breached.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Identify and Assess Cybersecurity Threats 3